High to Medium -> High to Low (715a43b3) · Commits · STAN4CRA / EN 304 620 Virtual Private Networks Part 1

EN-304-620-1.md

+5 −5

Original line number	Diff line number	Diff line
		@@ -774,13 +774,13 @@ Mitigations for Likelihood:

		* Medium to Low: TODO-HAS: add risk transfer to environment

		* High to Medium: TODO-HAS: add risk transfer to environment
		* High to Low: TODO-HAS: add risk transfer to environment

		Mitigations for Impact:

		* Medium to Low: AUTH-3, AUTH-5, NPII-1

		* High to Medium: AUTH-3, AUTH-4, AUTH-5, NPII-1, NPII-2, NPII-4
		* High to Low: AUTH-3, AUTH-4, AUTH-5, NPII-1, NPII-2, NPII-4

		### C.4.x TH-RDOS: Attacker launches denial of service attack on remote data processing solution

		@@ -888,13 +888,13 @@ Mitigations for Likelihood:

		* Medium to Low: EISO-\*

		* High to Medium: EISO-\*, DNSL-6
		* High to Low: EISO-\*, DNSL-6

		Mitigations for Impact:

		* Medium to Low: CRYPT-2, ROUT-1, AUTH-1, AUTH-2

		* High to Medium: CRYPT-\, SCDL-\, ROUT-\, AUTH-\
		* High to Low: CRYPT-\, SCDL-\, ROUT-\, AUTH-\

		### C.4.x TH-UNAA: Unauthorized authentication

		@@ -948,7 +948,7 @@ Mitigations for Likelihood:

		* Medium to Low: LOGG-1

		* High to Medium: LOGG-1, LOGG-2
		* High to Low: LOGG-1, LOGG-2

		Mitigations for Impact: